Packagist/livewire/livewire CVE-2024-21504: medium 6.1, EPSS 0.52%

Cross-site Scripting in livewire/livewire

Action: Upgrade livewire/livewire to 3.4.9 or later.

composer require livewire/livewire:3.4.9

Affected

Fixed versions

Sources

• osv: GHSA-389c-cf87-qmwj
• https://nvd.nist.gov/vuln/detail/CVE-2024-21504
• https://github.com/livewire/livewire/pull/8117
• https://github.com/livewire/livewire/commit/c65b3f0798ab2c9338213ede3588c3cdf4e6fcc0
• https://github.com/livewire/livewire
• https://github.com/livewire/livewire/releases/tag/v3.4.9
• https://security.snyk.io/vuln/SNYK-PHP-LIVEWIRELIVEWIRE-6446222

CVE-2024-21504 · published 2024-03-19T06:30:53Z · modified 2024-03-20T15:41:56.469581Z · JSON